
ServiceNow Architect - Security Architecture SME for SaaS Author with Security Clearance
Quick overview
Job description
SUVI Global Services is looking for a ServiceNow Security Architect to support the DoD OIG. To join our team of outstanding professionals, apply today! This position will serve as a senior security architecture Subject Matter Expert (SME), supporting the secure implementation, integration, and authorization of the Software as a Service (SaaS) platform. The Architect will collaborate with the ServiceNow Platform Architect, ServiceNow CSDM/CMDB Architect, and the cybersecurity team.
They will combine ServiceNow platform experience with cybersecurity, practical understanding of the Cybersecurity Risk Management Construct (CSRMC), continuous monitoring, automation, control inheritance, reciprocity, POA&M resolution, and mission-focused cyber risk management knowledge to ensure new capabilities, modules, and integrations are securely designed, appropriately assessed, and aligned with DoD OIG authorization requirements. Responsibilities
- Collaborate with the architect team to define technical architecture, security guidance, and risk management for ServiceNow implementations, configurations, applications, modules, workflows, integrations, and platform modernization, with emphasis on security, scalability, and operational support.
- Evaluate ServiceNow solutions for security risks involving identity and access management, privileged access, data protection, encryption, APIs, network connectivity, logging, and cloud security boundaries.
- Support the ServiceNow authorization strategy, including security control implementation, authorization boundaries, control inheritance, shared responsibilities, continuous monitoring, and maintenance of ATO/POA&M documentation.
- Assess security and authorization impacts of new ServiceNow modules, applications, data models, integrations, and architectural changes, then recommend appropriate security reviews, risk mitigation, authorization updates, and government approvals before production deployment.
- Evaluate data sharing and integrations between ServiceNow, other OIG systems, cloud services, and external providers. Identify security requirements, trust boundaries, interconnection risks and mitigations, and control responsibilities.
- Apply Cybersecurity Risk Management Construct (CSRMC) principles, Zero Trust, and Azure specific cloud security practices to improve risk management, security assessments, control inheritance, and authorization efficiency.
- Collaborate with the OIG ServiceNow PM, CISO, Cybersecurity team, and Enterprise Architecture Review Secretariat to establish practical security architecture review and approval processes integrated with ServiceNow development, change management, and release activities.
- Maintain ServiceNow security architecture diagrams, risk assessments, authorization documentation, and technical recommendations.
- Advise government IT and cybersecurity leadership on ServiceNow security architecture, authorization requirements, residual risks, and recommended mitigation strategies. Support briefings and decisions by cybersecurity leadership to the Authorizing Official (OIG CIO). Qualifications
- Active Secret security clearance.
- Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related technical field. Significant equivalent professional experience may be considered.
- 10+ years of relevant experience in enterprise IT architecture, cybersecurity engineering, cloud architecture, or related technical disciplines.
- Demonstrated ServiceNow architecture experience, including enterprise implementations, platform security, application configuration, integrations, and production environments.
- At least 5 years of experience supporting DoD RMF, information assurance, security engineering, or ATO activities within federal/DoD environments.
- Strong knowledge of DoDI 8510.01, NIST RMF, security controls, authorization boundaries, control inheritance, continuous monitoring, and POA&M management.
- Understanding of DoD SaaS security, FedRAMP, DoD Cloud Computing Security Requirements Guide (SRG), shared-responsibility models, and cloud authorization requirements.
- Experience evaluating secure integration architectures, data protection, identity management, APIs, and system interconnections.
- Familiarity with DoD CSRMC, Zero Trust, DevSecOps, automated security assessments, reciprocity, and continuous authorization practices.
- Strong technical communication skills, including the ability to explain cybersecurity risk and architecture decisions to senior government IT and cybersecurity leadership.
Preferred Qualifications
- CISSP or CISM certification.
- Experience with ServiceNow ITSM, ITOM, CMDB, Discovery, MID Servers, IntegrationHub, and regulated government cloud environments.
- Experience securing and supporting authorization of federal/DoD SaaS solutions, including ServiceNow, Azure Government, or Microsoft Power Platform.
- Advanced cybersecurity or cloud security credentials such as CISSP-ISSEP, ISC2 CGRC, CCSP, or Microsoft Azure security certifications.
- Experience establishing SaaS security architecture standards, authorization-change processes, and reusable RMF documentation for new capabilities and integrations.
Similar jobs
- FE

Sort Manager - HubRecently posted
FedEx · Hagerstown, MD · Hybrid 🇺🇸
Microsoft OfficeExpressTechnology$67.2k - $103.7k/yr - BO
Mission Systems Software Developer (Experienced & Senior)
Boeing · Daytona Beach, FL · On-site 🇺🇸
GitC#C+++4Technology$118.2k - $159.8k/yr - BO
Senior Software Engineer Mission Systems Software Developer
Boeing · Daytona Beach, FL · Hybrid 🇺🇸
GitC#Confluence+7Technology$184.4k - $249.6k/yr - TE
Enterprise DevOps EngineerRecently posted
TechProjects · Hamilton, NJ · On-site 🇺🇸
DockerGitAWS+6TechnologySalary not listed - RA

Systems Engineer IIRecently posted
Raytheon · Tewksbury, MA · Hybrid 🇺🇸
MATLABC++Python+1Technology$68.9k - $131.1k/yr - RA

Software Engineer II - (Onsite)Recently posted
Raytheon · Tucson, AZ · Hybrid 🇺🇸
MATLABC++Java+3Technology$75.8k - $144.2k/yr - RA

Embedded Security Software Engineer I (Onsite)Recently posted
Raytheon · Tewksbury, MA · Hybrid 🇺🇸
GitScrumC+++5Technology$57.2k - $108.8k/yr - RA

Sr. Systems Engineer - Modeling Simulation & Analysis EngineerRecently posted
Raytheon · Tucson, AZ · On-site 🇺🇸
MATLABGitLinear+3Technology$86.8k - $165.2k/yr - RA

Senior Systems EngineerRecently posted
Raytheon · Tucson, AZ · Hybrid 🇺🇸
AssemblyAgileTechnology$86.8k - $165.2k/yr - RA

Sr. Systems Engineer - SM-3 Test Qualification LeadRecently posted
Raytheon · Tucson, AZ · Hybrid 🇺🇸
Technology$95.5k - $181.7k/yr - NG

Principal Computer Systems Analyst - WindowsRecently posted
Northrop Grumman · Baltimore, MD · On-site 🇺🇸
SplunkActive DirectoryDNS+4Technology$98.9k - $148.3k/yr - NO

IT Systems Administrator (Multiple Levels) with Security ClearanceRecently posted
Noblis · Chantilly, VA · On-site 🇺🇸
PythonPowerShellAWS+5Technology$99.8k - $228.4k/yr